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AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

1. (CANCELLED) 

2. (CANCELLED) 

3. (CANCELLED) 

4. (CANCELLED) 

5. (CANCELLED) 

6. (CANCELLED) 

7. (Previously Presented) An authentication proxy arrangement in a H.323 
telecommunication network for allowing authentication of an end-user operating from an 
H.323 end-point without H.323v2 or H.235 authentication support and with a Gatekeeper 
requiring initial end-user authentication according to a first authentication protocol using 
H.235 and thus being unsupported by the end-point, the first authentication protocol 
being at least part of H.323v2 or a corresponding first security profile, said authentication 
proxy being adapted to form a signaling path for authentication of the end-point towards 
the Gatekeeper, the authentication proxy being arranged: 

to receive from the end-point of the end-user, authentication data comprising an 
end-user password and an end-point network location specification, the authentication 
data being transmitted to the authentication proxy using a second protocol different from 
said first protocol, 

to generate a first H.323 RAS (Registration, Admission and Signaling) message 
using said first protocol, said first H.323 RAS message presenting said obtained 
authentication data and including an authentication request requesting authentication of 
the end-user by the Gatekeeper on basis of said presented authentication data, 

to transmit said first H.323 RAS message to the Gatekeeper, 
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to receive a second H.323 RAS message from the Gatekeeper in response to said 
first H.323 RAS message, to interpret said second H.323 RAS message from the 
Gatekeeper for detecting a confirmation or rejection of said authentication request, and 

to generate and send to said end-point, on detection of said confirmation or 
rejection of said authentication request, an authentication confirm or reject message, 
respectively, using the second protocol. 

8. (Previously Presented) The arrangement of claim 7, wherein the end-point 
network location specification is an internet protocol (IP) address or a user name. 

9. (Previously Presented) The arrangement of claim 7, wherein obtaining the 
authentication data is performed by a simple html form, an applet, or a servlet. 

10. (Previously Presented) The arrangement of claim 9, wherein the applet is a 
signed applet. 

11. (Previously Presented) The arrangement of claim 7, wherein the second 
protocol includes http or https. 

12. (Previously Presented) The arrangement of claim 7, wherein said first H.323 
RAS message is a H.323 .V2 GRQ (Gatekeeper request) or a RRQ (Registration request), 
respectively including H.235 data that includes said authentication data. 

13. (Previously Presented) The arrangement of claim 12, wherein the second 
H.323 message is a GCF (Gatekeeper confirm) or a RCF (Registration confirm). 
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14. (Previously Presented) The arrangement of claim 7, wherein the authentication 
proxy is arranged to sending to the end-point of the end-user an http-response indicating 
authentication failure if the second H.323 message is a GRJ (Gatekeeper reject). 

15. (Previously Presented) A method using an authentication proxy arrangement 
in a H.323 telecommunication network for allowing authentication of an end-user 
operating from an H.323 end-point (1) without H.323v2 or H.235 authentication support 
and intending to operate with a Gatekeeper requiring initial end-user authentication 
according to a first authentication protocol using H.235 and thus being unsupported by 
the end-point, the first authentication protocol being at least part of H.323v2 or a 
corresponding first security profile, said authentication proxy being adapted to form a 
signaling path for authentication of the end-point towards the Gatekeeper, said method 
including: 

receiving from the end-point of the end-user, authentication data comprising an 
end-user password and an end-point network location specification, the authentication 
data having been transmitted to the authentication proxy using a second protocol different 
from said first protocol, 

generating a first H.323 RAS message using said first protocol, said first H.323 
RAS message presenting said obtained authentication data and including an 
authentication request requesting authentication of the end-user by the Gatekeeper on 
basis of said presented authentication data, 

transmitting said first H.323 RAS message to the Gatekeeper, 

receiving a second H.323 RAS message from the Gatekeeper in response to said 
first H.323 RAS message, 

interpreting said second H.323 RAS message from the Gatekeeper for detecting a 
confirmation or rejection of said authentication request, and 
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generating and sending to said end-point, on detection of said confirmation or 
rejection of said authentication request, an authentication confirm or reject message, 
respectively, using the second protocol. 

16. (Previously Presented) The method of claim 15, wherein the end-point 
network location specification is an internet protocol (IP) address or a user name. 

17. (Previously Presented) The method of claim 15, wherein obtaining the 
authentication data is performed by a simple html form, an applet, or a servlet. 

18. (Previously Presented) The method of claim 18, wherein the applet is a signed 

applet. 

19. (Previously Presented) The method of claim 15, wherein the second protocol 
includes http or https. 

20. (Previously Presented) The method of claim 15, wherein the first H.323 RAS 
message is a H.323 .V2 GRQ (Gatekeeper request) or a H.323 .V2 RRQ (Registration 
request), respectively, including H.235 data that includes said authentication data. 

21. (Previously Presented) The method of claim 15, wherein the second H.323 
message is a GCF (Gatekeeper confirm) or a RCF (Registration confirm). 

22. (Previously Presented) The method of claim 15, including the step of sending 
to the end-point of the end-user an http-response indicating authentication failure if the 
second H.323 message is a GRJ (Gatekeeper reject). 
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